{"id":166,"date":"2024-06-25T01:40:11","date_gmt":"2024-06-24T16:40:11","guid":{"rendered":"https:\/\/rakuha.com\/?p=166"},"modified":"2024-06-25T01:52:28","modified_gmt":"2024-06-24T16:52:28","slug":"wanictf-2024","status":"publish","type":"post","link":"https:\/\/rakuha.com\/?p=166","title":{"rendered":"WaniCTF 2024"},"content":{"rendered":"\n<p>\u5148\u65e5\u306eSECCON CTF\u306b\u5f15\u304d\u7d9a\u304d\u3001WaniCTF\u306b\u53c2\u52a0\u3057\u307e\u3057\u305f\u3002<br>6\u554f\u3057\u304b\u89e3\u3051\u307e\u305b\u3093\u3067\u3057\u305f\u304c\u3001Writeup\u3092\u3055\u3089\u3063\u3068\u66f8\u3044\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\"><p class=\"ez-toc-title\" style=\"cursor:inherit\">\u76ee\u6b21<\/p>\n<\/div><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/rakuha.com\/?p=166\/#Forensicstiny_usb\" >[Forensics]tiny_usb<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/rakuha.com\/?p=166\/#Forensicscodebreaker\" >[Forensics]codebreaker<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/rakuha.com\/?p=166\/#Miscsh\" >[Misc]sh<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/rakuha.com\/?p=166\/#Pwnablenc\" >[Pwnable]nc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/rakuha.com\/?p=166\/#WebBad_Worker\" >[Web]Bad_Worker<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/rakuha.com\/?p=166\/#Webpow\" >[Web]pow<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/rakuha.com\/?p=166\/#%E8%A7%A3%E3%81%8D%E3%81%9F%E3%81%8B%E3%81%A3%E3%81%9F%E5%95%8F%E9%A1%8C\" >\u89e3\u304d\u305f\u304b\u3063\u305f\u554f\u984c<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/rakuha.com\/?p=166\/#Cryptobeginners_rsa\" >[Crypto]beginners_rsa<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/rakuha.com\/?p=166\/#Cryptobeginners_aes\" >[Crypto]beginners_aes<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/rakuha.com\/?p=166\/#ForensicsI_wanna_be_a_streamer\" >[Forensics]I_wanna_be_a_streamer<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/rakuha.com\/?p=166\/#MiscJQ_Playground\" >[Misc]JQ Playground<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/rakuha.com\/?p=166\/#Reversinglambda\" >[Reversing]lambda<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/rakuha.com\/?p=166\/#Reversinghome\" >[Reversing]home<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/rakuha.com\/?p=166\/#WebOne_Day_One_Letter\" >[Web]One Day One Letter<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/rakuha.com\/?p=166\/#WebNoscript\" >[Web]Noscript<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Forensicstiny_usb\"><\/span>[Forensics]tiny_usb<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"466\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?resize=900%2C466&#038;ssl=1\" alt=\"\" class=\"wp-image-167\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?resize=1024%2C530&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?resize=300%2C155&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?resize=768%2C398&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?resize=800%2C414&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-7.png?w=1027&amp;ssl=1 1027w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u6dfb\u4ed8\u3055\u308c\u3066\u3044\u308b\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3068\u3001<code>chal_tiny_usb.iso<\/code>\u3068\u3044\u3046\u306e\u304c\u3042\u308b\u306e\u3067\u3001\u30de\u30a6\u30f3\u30c8\u3059\u308b\u3068\u753b\u50cf\u30d5\u30a1\u30a4\u30eb\u304c\u3042\u308b\u3002<br>\u305d\u306e\u753b\u50cf\u30d5\u30a1\u30a4\u30eb\u306b\u30d5\u30e9\u30b0\u304c\u66f8\u3044\u3066\u3042\u308b\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Forensicscodebreaker\"><\/span>[Forensics]codebreaker<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"381\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-8.png?resize=900%2C381&#038;ssl=1\" alt=\"\" class=\"wp-image-168\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-8.png?w=1004&amp;ssl=1 1004w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-8.png?resize=300%2C127&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-8.png?resize=768%2C325&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-8.png?resize=800%2C339&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3068QR\u30b3\u30fc\u30c9\u306e\u753b\u50cf\u306e\u4e0a\u304b\u3089\u30d0\u30c4\u5370\u304c\u66f8\u304b\u308c\u305f\u753b\u50cf\u304c\u3042\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"111\" height=\"111\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/chal_codebreaker-%E3%82%B3%E3%83%94%E3%83%BC.png?resize=111%2C111&#038;ssl=1\" alt=\"\" class=\"wp-image-170\"\/><\/figure>\n\n\n\n<p>QR\u30b3\u30fc\u30c9\u306f\u7279\u5b9a\u306e\u90e8\u5206\u3092\u3061\u3083\u3093\u3068\u3059\u308c\u3070\u3001\u8aa4\u308a\u88dc\u6b63\u3067\u3061\u3083\u3093\u3068\u8aad\u307f\u8fbc\u3093\u3067\u304f\u308c\u308b\u306e\u3067\u3001\u3068\u308a\u3042\u3048\u305a\u304d\u308c\u3044\u306b\u3057\u3066\u3044\u304f\u3002<br>\u4ee5\u4e0b\u306e\u30b5\u30a4\u30c8\u3092\u53c2\u8003\u306b\u3001\u300c\u30a2\u30e9\u30a4\u30e1\u30f3\u30c8\u30d1\u30bf\u30fc\u30f3\u300d\u300c\u30af\u30ef\u30a4\u30a8\u30c3\u30c8\u30be\u30fc\u30f3\u300d\u300c\u30bf\u30a4\u30df\u30f3\u30b0\u30d1\u30bf\u30fc\u30f3\u300d\u304c\u3061\u3083\u3093\u3068\u308f\u304b\u308b\u3088\u3046\u306b\u304d\u308c\u3044\u306b\u3057\u305f\u3002<br>https:\/\/www.keyence.co.jp\/ss\/products\/autoid\/codereader\/basic2d_qr.jsp<\/p>\n\n\n\n<p>\u4fee\u6b63\u3057\u305f\u753b\u50cf\u304c\u3053\u3061\u3089\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"111\" height=\"111\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/chal_codebreaker.png?resize=111%2C111&#038;ssl=1\" alt=\"\" class=\"wp-image-169\"\/><\/figure>\n\n\n\n<p>\u3053\u308c\u3092\u8aad\u307f\u8fbc\u3080\u3068\u30d5\u30e9\u30b0\u304c\u30b2\u30c3\u30c8\u3067\u304d\u308b\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Miscsh\"><\/span>[Misc]sh<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"717\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-9.png?resize=900%2C717&#038;ssl=1\" alt=\"\" class=\"wp-image-171\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-9.png?w=1017&amp;ssl=1 1017w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-9.png?resize=300%2C239&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-9.png?resize=768%2C612&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-9.png?resize=800%2C637&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u4e0e\u3048\u3089\u308c\u305f\u6570\u5024\u3092\u4e88\u6e2c\u3059\u308b\u554f\u984c\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#!\/usr\/bin\/env sh\n\nset -euo pipefail\n\nprintf \"Can you guess the number? > \"\n\nread i\n\nif printf $i | grep -e &#91;^0-9]; then\n    printf \"bye hacker!\"\n    exit 1\nfi\n\nr=$(head -c512 \/dev\/urandom | tr -dc 0-9)\n\nif &#91;&#91; $r == $i ]]; then\n    printf \"How did you know?!\"\n    cat flag.txt\nelse\n    printf \"Nope. It was $r.\"\nfi<\/code><\/pre>\n\n\n\n<p><code>printf $i | grep -e [^0-9]<\/code>\u306e\u90e8\u5206\u304c\u3042\u308b\u304b\u3089\u6570\u5b57\u4ee5\u5916\u5165\u308c\u3061\u3083\u3044\u3051\u306a\u3044\u304b\u3068\u601d\u3044\u304d\u3084\u3001\u6570\u5b57+\u534a\u89d2\u30b9\u30da\u30fc\u30b9+\u305d\u308c\u4ee5\u5916\u306e\u5165\u529b\u3067\u3082\u901a\u904e\u3067\u304d\u308b\u3053\u3068\u304c\u308f\u304b\u3063\u305f\u306e\u3067\u3001\u3042\u3068\u306f<code>f [[ $r == $i ]]; then<\/code>\u3092\u901a\u904e\u3067\u304d\u308b\u3088\u3046\u306a\u6587\u5b57\u3092\u5165\u529b\u3059\u308c\u3070OK\u3002<\/p>\n\n\n\n<p><code>1 || 1 == 1<\/code> \u3068\u3044\u3046\u5165\u529b\u3092\u3059\u308b\u3053\u3068\u3067\u3001OR\u306e\u5f8c\u306e\u6761\u4ef6\u304c\u5fc5\u305atrue\u306b\u306a\u308b\u306e\u3067\u3001\u3053\u308c\u3067\u7121\u4e8b\u30d5\u30e9\u30b0\u3092\u30b2\u30c3\u30c8\u3059\u308b\u3053\u3068\u306b\u6210\u529f\u3057\u305f\u3002<br>\uff08\u3061\u306a\u307f\u306b\u3053\u308c\u3092Windows\u306eGit Bash\u4e0a\u3067\u8a66\u3057\u3066\u305f\u3089\u3001\u3046\u307e\u304f\u3044\u304b\u306a\u304f\u3066\u5c11\u3057\u30cf\u30de\u3063\u3066\u307e\u3057\u305f<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Pwnablenc\"><\/span>[Pwnable]nc<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"704\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?resize=900%2C704&#038;ssl=1\" alt=\"\" class=\"wp-image-172\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?resize=1024%2C801&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?resize=300%2C235&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?resize=768%2C601&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?resize=800%2C626&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-10.png?w=1053&amp;ssl=1 1053w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u3053\u308c\u306fnc\u3092\u4f7f\u3046\u7df4\u7fd2\u554f\u984c\u3002\u4e0e\u3048\u3089\u308c\u305f\u30bd\u30fc\u30b9\u30b3\u30fc\u30c9\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u3066\u300115+1\u309216\u9032\u6570\u3067\u7b54\u3048\u308b\u554f\u984c\u306e\u3088\u3046\u3060\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>void win(){\n    system(\"cat FLAG\");\n}\n\nint main(){\n    init();\n    int answer;\n    printf(\"15+1=0x\");\n    scanf(\"%d\", &amp;answer);\n    if(answer == 10){\n        win();\n    }\n    else{\n        puts(\"incorecct:(\");\n    }\n    return 0;\n}<\/code><\/pre>\n\n\n\n<p>10\u3092\u5165\u529b\u3059\u308b\u3053\u3068\u3067\u30d5\u30e9\u30b0\u3092\u30b2\u30c3\u30c8<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WebBad_Worker\"><\/span>[Web]Bad_Worker<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"460\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-11.png?resize=900%2C460&#038;ssl=1\" alt=\"\" class=\"wp-image-173\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-11.png?w=1020&amp;ssl=1 1020w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-11.png?resize=300%2C153&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-11.png?resize=768%2C392&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-11.png?resize=800%2C409&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3001\u30d5\u30e9\u30b0\u3092\u53d6\u5f97\u3067\u304d\u308b\u30dc\u30bf\u30f3\u304c\u3042\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"377\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-12.png?resize=900%2C377&#038;ssl=1\" alt=\"\" class=\"wp-image-174\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-12.png?w=937&amp;ssl=1 937w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-12.png?resize=300%2C126&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-12.png?resize=768%2C322&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-12.png?resize=800%2C336&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u305f\u3060\u3001\u300cFetch FLAG.txt\u300d\u3092\u62bc\u3057\u3066\u3082\u6b63\u3057\u3044\u30d5\u30e9\u30b0\u306f\u30b2\u30c3\u30c8\u3067\u304d\u306a\u3044\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"466\" height=\"212\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-13.png?resize=466%2C212&#038;ssl=1\" alt=\"\" class=\"wp-image-175\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-13.png?w=466&amp;ssl=1 466w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-13.png?resize=300%2C136&amp;ssl=1 300w\" sizes=\"auto, (max-width: 466px) 100vw, 466px\" \/><\/figure>\n\n\n\n<p>\u958b\u767a\u8005\u30c4\u30fc\u30eb\u3067\u901a\u4fe1\u5185\u5bb9\u3092\u898b\u3066\u307f\u308b\u3068Service Worker\u304c\u53d6\u5f97\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"179\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?resize=900%2C179&#038;ssl=1\" alt=\"\" class=\"wp-image-176\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?resize=1024%2C204&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?resize=300%2C60&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?resize=768%2C153&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?resize=800%2C159&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-14.png?w=1199&amp;ssl=1 1199w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>service-worker.js\u3092\u898b\u3066\u307f\u308b\u3068FLAG.txt\u3092\u53d6\u5f97\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001DUMMY.txt\u306e\u5185\u5bb9\u3092\u53d6\u5f97\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u308b\u3063\u307d\u3044\u306e\u3067\u3001\u305d\u308c\u3092curl\u3067\u30ea\u30af\u30a8\u30b9\u30c8\u3059\u308b\u3068\u30d5\u30e9\u30b0\u30b2\u30c3\u30c8\u3002<br>\uff08\u4eca\u66f4\u6c17\u3065\u3044\u305f\u3051\u3069\u3001\u30d6\u30e9\u30a6\u30b6\u3067\u305d\u306eURL\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3082\u30d5\u30e9\u30b0\u30b2\u30c3\u30c8\u3067\u304d\u306a\u3044\u306e\u304b\u3002\u3002\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Webpow\"><\/span>[Web]pow<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"665\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?resize=900%2C665&#038;ssl=1\" alt=\"\" class=\"wp-image-177\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?resize=1024%2C757&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?resize=300%2C222&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?resize=768%2C568&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?resize=800%2C592&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-15.png?w=1033&amp;ssl=1 1033w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u306a\u3093\u304b\u9811\u5f35\u3063\u3066\u8a08\u7b97\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"563\" height=\"296\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-17.png?resize=563%2C296&#038;ssl=1\" alt=\"\" class=\"wp-image-179\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-17.png?w=563&amp;ssl=1 563w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-17.png?resize=300%2C158&amp;ssl=1 300w\" sizes=\"auto, (max-width: 563px) 100vw, 563px\" \/><\/figure>\n\n\n\n<p>\u4ee5\u4e0b\u306e\u30cf\u30c3\u30b7\u30e5\u8a08\u7b97\u304ctrue\u306e\u5834\u5408\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u6295\u3052\u3066\u3044\u308b\u3089\u3057\u3044\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>       function hash(input) {\n        let result = input;\n        for (let i = 0; i &lt; 10; i++) {\n          result = CryptoJS.SHA256(result);\n        }\n        return (result.words&#91;0] &amp; 0xFFFFFF00) === 0;\n      }\n<\/code><\/pre>\n\n\n\n<p>\u306a\u3093\u304b\u3046\u307e\u3044\u65b9\u6cd5\u306f\u306a\u3044\u304b\u3068\u601d\u3044\u3001\u3068\u308a\u3042\u3048\u305a\u30ea\u30af\u30a8\u30b9\u30c8\u3092curl\u3067\u518d\u9001\u3057\u3066\u307f\u305f\u3089\u3001progress\u304c1\u5897\u3048\u305f\u3002<br>\u3058\u3083\u3042\u3053\u308c\u30921000000\u56de\u3084\u308c\u3070\u3044\u3044\u306e\u304b&#8230;\uff1f\u3068\u601d\u3044\u30011\u79d2\u3054\u3068\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u6295\u3052\u308b\u3088\u3046\u306b\u3057\u3066\u307f\u305f\u3089\u3001\u3059\u3050\u306b\u30a2\u30af\u30bb\u30b9\u5236\u9650\u306b\u3072\u3063\u304b\u304b\u3063\u305f\u3002<br>\u3088\u304f\u3088\u304f\u898b\u308b\u3068\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u30dc\u30c7\u30a3\u304c\u914d\u5217\u5f62\u5f0f\u3068\u306a\u3063\u3066\u3044\u308b\u306e\u3067\u3001\u3082\u3057\u3084\u3068\u601d\u3044\u3001\u3046\u307e\u304f\u3044\u304f\u6570\u5b57\u3092\u914d\u5217\u3067\u30ea\u30af\u30a8\u30b9\u30c8\u3059\u308b\u3068\u3001\u3061\u3083\u3093\u3068\u30ea\u30af\u30a8\u30b9\u30c8\u3057\u305f\u914d\u5217\u306e\u6570\u5206progress\u304c\u5897\u3048\u305f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"136\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?resize=900%2C136&#038;ssl=1\" alt=\"\" class=\"wp-image-180\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?resize=1024%2C155&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?resize=300%2C45&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?resize=768%2C116&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?resize=800%2C121&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2024\/06\/image-18.png?w=1077&amp;ssl=1 1077w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u3069\u3053\u307e\u3067\u3044\u3051\u308b\u304b\u8a66\u3057\u305f\u7d50\u679c\u3001100000\u304f\u3089\u3044\u307e\u3067\u306f\u3044\u3051\u305d\u3046\u3060\u3063\u305f\u306e\u3067\u3001\u305d\u308c\u309210\u56de\u304f\u3089\u3044\u30ea\u30af\u30a8\u30b9\u30c8\u3059\u308b\u3088\u3046\u306a\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u66f8\u3044\u3066\u30d5\u30e9\u30b0\u3092\u30b2\u30c3\u30c8\u3057\u305f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>#!\/bin\/sh\n\ndata='\"2862152\"'\nfor i in `seq 1 100000`\ndo\ndata+=',\"7844289\"'\ndone\necho \"&#91;${data}]\" > data.txt\n\nfor j in `seq 1 10`\ndo\ncurl 'https:\/\/web-pow-lz56g6.wanictf.org\/api\/pow' \\\n  -H 'accept: *\/*' \\\n  -H 'accept-language: ja' \\\n  -H 'content-type: application\/json' \\\n  -H 'cookie: pow_session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uSWQiOiI2MmZhZDdiMy1mM2Y1LTRhYzctYWY2Yi1lYmNhNmUwZTk0YzMifQ.7YYhRvb4TSNs-M9WPNP9hXw3t2A00uGQFPq-IaDYajs' \\\n  -H 'origin: https:\/\/web-pow-lz56g6.wanictf.org' \\\n  -H 'priority: u=1, i' \\\n  -H 'referer: https:\/\/web-pow-lz56g6.wanictf.org\/' \\\n  -H 'sec-ch-ua: \"Not\/A)Brand\";v=\"8\", \"Chromium\";v=\"126\", \"Google Chrome\";v=\"126\"' \\\n  -H 'sec-ch-ua-mobile: ?0' \\\n  -H 'sec-ch-ua-platform: \"Windows\"' \\\n  -H 'sec-fetch-dest: empty' \\\n  -H 'sec-fetch-mode: cors' \\\n  -H 'sec-fetch-site: same-origin' \\\n  -H 'user-agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/126.0.0.0 Safari\/537.36' \\\n  -d @data.txt\n  sleep 10\ndone<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E8%A7%A3%E3%81%8D%E3%81%9F%E3%81%8B%E3%81%A3%E3%81%9F%E5%95%8F%E9%A1%8C\"><\/span>\u89e3\u304d\u305f\u304b\u3063\u305f\u554f\u984c<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Cryptobeginners_rsa\"><\/span>[Crypto]beginners_rsa<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u7d20\u6570\u304c5\u500b\u3042\u308b\u30d1\u30bf\u30fc\u30f3\u304c\u51fa\u3066\u304d\u3066\u3001\u300c\uff1f\uff1f\uff1f\u300d\u3068\u306a\u3063\u305f\u3002<br>n\u3092\u56e0\u6570\u5206\u89e3\u3057\u305f\u3089\u89e3\u304c1\u3064\u3057\u304b\u306a\u3044\u306e\u306b\u6c17\u3065\u3051\u306a\u304b\u3063\u305f\u306e\u304c\u6557\u56e0\u3002<br>\u4ed6\u306e\u4eba\u306e\u89e3\u304d\u65b9\u3092\u53c2\u8003\u306b<code>sage<\/code>\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u306e\u3067\u3001\u6b21\u3053\u305d\u306f\u8131Beginners\u3092\u76ee\u6307\u3059&#8230;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Cryptobeginners_aes\"><\/span>[Crypto]beginners_aes<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u3053\u3063\u3061\u306frsa\u304c\u89e3\u3051\u306a\u3044\u3053\u3068\u3067\u3042\u3093\u307e\u308a\u3061\u3083\u3093\u3068\u898b\u3066\u306a\u304b\u3063\u305f\u306e\u3082\u3042\u3063\u305f\u304b\u3082\u3057\u308c\u306a\u3044\u3001\u3001\u3001<br>\u4ed6\u306e\u4eba\u306e\u89e3\u304d\u65b9\u3092\u53c2\u8003\u306b\u6b21\u306f\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"ForensicsI_wanna_be_a_streamer\"><\/span>[Forensics]I_wanna_be_a_streamer<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u30d1\u30b1\u30c3\u30c8\u30ad\u30e3\u30d7\u30c1\u30e3\u304b\u3089\u3046\u307e\u304f\u30c7\u30fc\u30bf\u3092\u53d6\u308a\u51fa\u3059\u3053\u3068\u304c\u3067\u304d\u305a\u65ad\u5ff5\u3002<br>\u306a\u3093\u304b\u3044\u3044\u3068\u3053\u308d\u307e\u3067\u884c\u3063\u3066\u305f\u6c17\u304c\u3059\u308b\u3093\u3060\u3051\u3069\u306a\u30fc<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"MiscJQ_Playground\"><\/span>[Misc]JQ Playground<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u5165\u529b\u3059\u308b\u6587\u5b57\u304c9\u6587\u5b57\u4ee5\u4e0a\u3060\u3068\u306f\u3058\u304b\u308c\u3066\u3057\u307e\u3046\u5236\u9650\u304c\u304d\u3064\u304f\u3066\u82e6\u3057\u3093\u3067\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p><code>' -R \/* #<\/code>\u3068\u304b\u3060\u30689\u6587\u5b57\u3067\u3001\u3053\u308c\u4ee5\u4e0a\u7121\u7406\u3067\u306f&#8230; \u3063\u3066\u306a\u3063\u3066\u3044\u305f\u3051\u3069\u3001\u4ed6\u306e\u4eba\u306ewriteup\u3092\u898b\u3066\u76ee\u304b\u3089\u3046\u308d\u3053\u3067\u3057\u305f\u3002\u307e\u3055\u304b\u6700\u5f8c\u304c\u30b7\u30f3\u30b0\u30eb\u30af\u30a9\u30fc\u30c8\u3060\u3068\u306f\u3001\u3001\u3001<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Reversinglambda\"><\/span>[Reversing]lambda<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u3053\u306e\u624b\u306e\u554f\u984c\u3001\u6bce\u56deChat-GPT\u541b\u306b\u304a\u9858\u3044\u3059\u308b\u3093\u3067\u3059\u3051\u3069\u3001\u3046\u307e\u304f\u3044\u304b\u305a\u7d50\u5c40\u30d5\u30e9\u30b0\u304c\u3068\u308c\u305a\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Reversinghome\"><\/span>[Reversing]home<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Ghidra\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3001gdb\u3092\u99c6\u4f7f\u3057\u3066\u81e8\u3080\u3082\u3001<code>constructFlag<\/code>\u95a2\u6570\u3092\u547c\u3073\u51fa\u3057\u305f\u5f8c\u306b\u3069\u3053\u306b\u30d5\u30e9\u30b0\u306e\u30c7\u30fc\u30bf\u304c\u3042\u308b\u304b\u308f\u304b\u3089\u305a\u7d42\u4e86\u3002\u3082\u3046\u3061\u3087\u3063\u3068\u7279\u8a13\u305b\u306d\u3070\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WebOne_Day_One_Letter\"><\/span>[Web]One Day One Letter<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u30bd\u30fc\u30b9\u3092\u3042\u308b\u7a0b\u5ea6\u8aad\u3093\u3067\u3001\u7121\u7406\u3067\u306f&#8230;\u3068\u601d\u3063\u3066\u3057\u307e\u3063\u305f\u3002<br>\u307e\u3055\u304btimeserver\u3092\u81ea\u5206\u3067\u7acb\u3061\u4e0a\u3052\u308b\u3068\u306f\u3001\u3001\u3001<br>\u6b21\u306f\u89e3\u3051\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WebNoscript\"><\/span>[Web]Noscript<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u3053\u308c\u306f\u3082\u3046\u3061\u3087\u3063\u3068\u3061\u3083\u3093\u3068\u53d6\u308a\u7d44\u3093\u3067\u3044\u308c\u3070\u89e3\u3051\u305f\u304b\u3082\u3057\u308c\u306a\u3044\u554f\u984c\u3002<br>\u4ed6\u306e\u5206\u91ce\u306b\u3044\u308d\u3044\u308d\u624b\u3092\u51fa\u3057\u3066\u3057\u307e\u3063\u305f\u306e\u3067\u3001\u3053\u3046\u3044\u3046\u306e\u306f\u8170\u3092\u636e\u3048\u3066\u89e3\u3051\u308b\u3088\u3046\u306b\u306a\u308a\u305f\u3044\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5148\u65e5\u306eSECCON CTF\u306b\u5f15\u304d\u7d9a\u304d\u3001WaniCTF\u306b\u53c2\u52a0\u3057\u307e\u3057\u305f\u30026\u554f\u3057\u304b\u89e3\u3051\u307e\u305b\u3093\u3067\u3057\u305f\u304c\u3001Writeup\u3092\u3055\u3089\u3063\u3068\u66f8\u3044\u3066\u3044\u304d\u307e\u3059\u3002 [Forensics]tiny_usb \u6dfb\u4ed8\u3055\u308c\u3066\u3044\u308b\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3068\u3001chal_&hellip; <span class=\"clear\"><\/span><a href=\"https:\/\/rakuha.com\/?p=166\" class=\"more-link read-more\" rel=\"bookmark\"><span class=\"screen-reader-text\">WaniCTF 2024<\/span><i class=\"fa fa-arrow-right\"><\/i> \u306e\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2],"tags":[13],"class_list":["post-166","post","type-post","status-publish","format-standard","hentry","category-ctf","tag-ctf"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=166"}],"version-history":[{"count":2,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/166\/revisions"}],"predecessor-version":[{"id":182,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/166\/revisions\/182"}],"wp:attachment":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}